scholarly journals Improving the Fault Tolerance of Elements of Modern Infocommunication Networks with the Use of Default Gateway Redundancy Protocols

2020 ◽  
pp. 68-81
Author(s):  
Oleksandra Yeremenko ◽  
Amal Mersni
Keyword(s):  
Fault Tolerance ◽  
Network Architecture ◽  
Fault Tolerant ◽  
Future Research ◽  
Software Defined Network ◽  
Control Plane ◽  
Network Resources ◽  
Data Plane ◽  
Recent Developments ◽  
Control Traffic

The article is devoted to the Network Layer means to ensure resilience during designing an infocommunication system that can counteract faults and failures. A review of the default gateway redundancy protocols concept and analysis of recent developments to overcome fault tolerance challenges in the Software-Defined Networks (SDN) control plane are conducted. In addition, an approach to the use of default gateway redundancy protocols in the existing Software-Defined Network architecture is proposed. Therefore, within the approach, the redundancy of the virtual controller is organized based on the current protocol implemented in traditional IP networks, and the SDN switch interacts with the virtual controller. This mechanism aims to reduce the amount of circulating overhead (control traffic), and the backup controller’s organization increases the control plane’s reliability. Whereas in hybrid and hierarchical SDN networks with border routers, the GLBP mechanism can be applied, which increases the reliability of the controller connected to the data plane. In addition, there are several scenarios where the controller that manages the operation of the SDN data plane may have multiple backup controllers to switch in case of failure, or a controller pool is used to manage each network that makes up the SDN data plane. It also highlights promising future areas for research and development to improve Software-Defined Network resilience, which contributes to the emergence of new solutions. Thus, future research directions are seen in proposing mathematical flow-based models of fault-tolerant interaction of the control plane and the data plane based on redundancy. At the same time, setting the problem in an optimization form with the implementation of load balancing will help to use available network resources effectively.

scholarly journals Mitigation of DDoS attack instigated by compromised switches on SDN controller by analyzing the flow rule request traffic

2018 ◽  
Vol 7 (2.6) ◽  
pp. 46 ◽  
Author(s):  
Sanjeetha R ◽  
Shikhar Srivastava ◽  
Rishab Pokharna ◽  
Syed Shafiq ◽  
Dr Anita Kanavalli
Keyword(s):  
Network Architecture ◽  
Flow Rule ◽  
Software Defined Network ◽  
Ddos Attacks ◽  
Control Plane ◽  
Ddos Attack ◽  
Flow Table ◽  
Data Plane ◽  
Ddos Detection ◽  
Sdn Controller

Software Defined Network (SDN) is a new network architecture which separates the data plane from the control plane. The SDN controller implements the control plane and switches implement the data plane. Many papers discuss about DDoS attacks on primary servers present in SDN and how they can be mitigated with the help of controller. In our paper we show how DDoS attack can be instigated on the SDN controller by manipulating the flow table entries of switches, such that they send continuous requests to the controller and exhaust its resources. This is a new, but one of the possible way in which a DDoS attack can be performed on controller. We show the vulnerability of SDN for this kind of attack. We further propose a solution for mitigating it, by running a DDoS Detection module which uses variation of flow entry request traffic from all switches in the network to identify compromised switches and blocks them completely.

scholarly journals The Deployment of Routing Protocols in Distributed Control Plane of SDN

2014 ◽  
Vol 2014 ◽  
pp. 1-8 ◽  
Author(s):  
Zhou Jingjing ◽  
Cheng Di ◽  
Wang Weiming ◽  
Jin Rong ◽  
Wu Xiaochun
Keyword(s):  
Distributed Control ◽  
Closed System ◽  
Routing Protocols ◽  
Network Architecture ◽  
Software Defined Network ◽  
Control Plane ◽  
Data Plane ◽  
Simulation Results ◽  
Routing Control ◽  
Programmable Network

Software defined network (SDN) provides a programmable network through decoupling the data plane, control plane, and application plane from the original closed system, thus revolutionizing the existing network architecture to improve the performance and scalability. In this paper, we learned about the distributed characteristics of Kandoo architecture and, meanwhile, improved and optimized Kandoo’s two levels of controllers based on ideological inspiration of RCP (routing control platform). Finally, we analyzed the deployment strategies of BGP and OSPF protocol in a distributed control plane of SDN. The simulation results show that our deployment strategies are superior to the traditional routing strategies.

scholarly journals A Review on Software-Defined Networking Distributed Controllers

2020 ◽  
Vol 9 (2) ◽  
pp. 24953-24961
Author(s):  
Worku Muluye
Keyword(s):  
Network Architecture ◽  
Computer Network ◽  
Software Defined Networking ◽  
Critical Issue ◽  
Software Defined Network ◽  
Control Plane ◽  
Second Best ◽  
Distributed Controller ◽  
Data Plane ◽  
Distributed Controllers

A computer network is a critical issue in our day to day activity; however, today it works under various problems. Since in the current network architecture the control plane and data plane are vertically bundled on the same device. To solve this problem programmable Software-Defined Network is released. OpenFlow is a protocol that vertically separates control plane and data plane of the network devices. In SDN the controllers are the brains of the network that controls the network devices. Today’s network required successful integration of distributed controllers to make the network more consistent. SDN distributed controller is a controller that we can add or remove the controllers according to the number of devices change. Distributed controller architecture has investigated and compared the 6 recent distributed controllers by using 26 criteria. Orion is the first best controller and ONOS is the second best controller.

scholarly journals Detection and Mitigation of Flood Attacks in IPv6 Enabled Software Defined Networks

2020 ◽  
pp. 1-9
Author(s):  
O. Ashimi Quadri ◽  
Adeniji Oluwashola David
Keyword(s):  
Network Architecture ◽  
Denial Of Service ◽  
Cost Effective ◽  
Centralized Control ◽  
Ddos Attacks ◽  
Control Plane ◽  
Network Resources ◽  
Effective Manner ◽  
Data Plane ◽  
Experimental Testbed

Software-defined networking (SDN) is an emerging technology, which provides network architecture that decouples the control plane from the data plane. Due to the centralized control, the network becomes more dynamic, and the network resources are managed in a more efficient and cost-effective manner. The centralization of the control plane requires robust and real-time security techniques. The security Techniques will protect it from any sign of vulnerabilities associated with the network such as a distributed denial of service (DDoS) attacks. The problem of the data-plane is that the attack is hard to be tracked by the SDN controlling plane. This makes the switches to be more susceptible against these types of attacks and hence it is very important to have quick provisional methods in place to prevent the switches from breaking down as soon as first signs of an attack are detected. To resolve this problem, the research developed a mechanism that detects and mitigates flood attacks in IPv6 enabled software to define networks. An experimental testbed was developed using sFlow technique, floodlight controller, and OpenFlow version 1.3. A mitigation algorithm was also developed and was tested with a simulation tool Mininet. The real network traffic was tested on the testbed to investigate the effective mitigation of a DDoS attack. The mitigation time performance for IPv6 was 46.6% while IPv4 was 66.6%. Also, The result gathered from the experiment showed that both the response and detection times were 4 secs while the mitigation time was 7secs respectively. The overall control time being 11 secs. The experimental Testbed result shows that the developed testbed outperformed the previous methods with the ability to detect threats on the network faster. The result from the IPv6 testbed is a probable solution to mitigate the threats posed by DDoS attacks on the IPv6 enabled SDN network resources.

ANALISA PERFORMANSI CONTROLLER PADA ARSITEKTUR JARINGAN SOFTWARE DEFINED NETWORK (SDN)

Repositor ◽  
2020 ◽  
Vol 2 (12) ◽  
pp. 1727
Author(s):  
Agung Dwi Rahmawan ◽  
Syaifuddin Syaifuddin ◽  
Diah Risqiwati
Keyword(s):  
Packet Loss ◽  
Network Architecture ◽  
Computer Network ◽  
Destination Node ◽  
Software Defined Network ◽  
Control Plane ◽  
Value Analysis ◽  
Background Traffic ◽  
Data Plane

AbstrakSoftware Defined Network (SDN) merupakan sebuah konsep pendekatan baru dalam jaringan untuk mendesain, membangun serta mengelola suatu jaringan komputer. Konsep ini melakukan pemisahan terhadap Data Plane dan Control Plane. Dalam konsep SDN ini terdapat suatu komponen penting yang bertanggung jawab terhadap segala aturan dalam pengelolaan dan pendistribusian informasi terhadap seluruh perangkat jaringan yaitu Controller. Karena peran Controller yang penting maka performa dari Controller perlu diuji sehingga dapat mengetahui kemampuan dari Controller yang digunakan. Dalam penelitian ini dilakukan perbandingan analisis nilai Quality of Services (QoS) terhadap implementasi SDN menggunakan Controller Floodlight dan Ryu dengan menjalankan topologi linear dan mesh dalam jumlah Switch yang beragam mulai dari 4, 8, 12 dan 16 Switch. Selama pengujian berlangsung dari node sumber ke node tujuan yang sama juga dialiri variasi background traffic mulai dari 50 hingga 200 Mbps.  Hasil yang didapatkan yaitu Controller Ryu memiliki nilai QoS yang lebih baik dari floodlight pada semua topologi yang diujikan, nilai latency dan jitter pada floodlight lebih tinggi dari ryu serta cenderung meningkat pada traffic 100 Mbps Pada throughput, ryu memiliki nilai lebih tinggi dengan kisaran 856-933 Kbps. Sedangkan pada packet loss floodlight lebih tinggi sementara ryu hanya memiliki rata-rata packet loss sebesar 0,5%. Namun pada pengujian hanya pada jumlah switch, floodlight menjamin dalam tingkat respons serta pengelolaan data yang besar di dalam arsitektur jaringan SDN.Abstract Software Defined Network (SDN) is a concept of a new approach in networking to design, build and manage a computer network. This concept separates the Data Plane and Control Plane. In this SDN concept there is an important component that is responsible for all rules in the management and distribution of information to all network devices that is Controller. Due to the important Controller role then the performance of the Controller needs to be tested so as to know the ability of the Controller to use. In this study, a comparison of Quality of Service (QoS) value analysis on SDN implementation using Floodlight and Ryu Controller by running linear and mesh topology in varying number of Switches ranging from 4, 8, 12 and 16 Switch. During the test from the source node to the same destination node is also varies background traffic ranging from 50 to 200 Mbps. The result is that Controller Ryu has better QoS value than floodlight on all tested topologies, the latency and jitter values on the floodlight are higher than ryu and tend to increase on 100 Mbps traffic. Throughput On ryu. have a higher value with the range of 856-933 Kbps. While the packet loss floodlight higher while ryu only have an average packet loss of 0.5%. But on testing only on the number of switches, the floodlight guarantees great response rates and data management within the SDN network architecture.

Dynamical Traffic Engineering in Software-Defined Network

2014 ◽  
Vol 610 ◽  
pp. 954-958 ◽  
Author(s):  
Yi Fan Yu ◽  
Yong Li ◽  
De Peng Jin
Keyword(s):  
Linear Programming ◽  
Real Time ◽  
Traffic Engineering ◽  
Network Architecture ◽  
Optimal Solution ◽  
Software Defined Network ◽  
Software Defined Networks ◽  
Control Plane ◽  
Two Stage ◽  
Data Plane

Software-Defined Networks (SDN), as newly proposed network architecture, has a great potential in optimizing network traffics. In SDN, the control plane is separated from the data plane. With the help of the centralized controller, we can gather information of the network in real time. In this work, we propose a practical two-stage approach for traffic engineering that takes advantages of SDN. The approach not only assures every newly injected flow gets a suitable route that does not have too much payload on it, but also schedules the overall flows so that they are distributed more equally in the network. Furthermore, we demonstrate its efficiency in terms of port speed and compared it with port speed under the default routing decision. We also use linear programming to find the optimal solution and compare it with our result.

scholarly journals IMPLEMENTING NDN USING SDN: A REVIEW ON METHODS AND APPLICATIONS

2016 ◽  
Vol 17 (2) ◽  
pp. 11-20 ◽  
Author(s):  
Shiva Rowshanrad ◽  
Mohamad Reza Parsaei ◽  
Manijeh Keshtgari
Keyword(s):  
Computer Networks ◽  
Network Architecture ◽  
Software Defined Networking ◽  
Network Architectures ◽  
Control Plane ◽  
Network Resources ◽  
End Points ◽  
Important Requirement ◽  
Data Plane ◽  
Data Networking

In recent years many claims about the limitations of todays’ network architecture, its lack of flexibility and ability to response to ongoing changes and increasing users demands. In this regard, new network architectures are proposed. Software Defined Networking (SDN) is one of these new architectures which centralizes the control of network by separating control plane from data plane. This separation leads to intelligence, flexibility and easier control in computer networks. One of the advantages of this framework is the ability to implement and test new protocols and architectures in actual networks without any concern of interruption.Named Data Networking (NDN) is another paradigm for future network architecture. With NDN the network becomes aware of the content that is providing, rather than just transferring it among end-points. NDN attracts researchers’ attention and known as the potential future of networking and internet. Providing NDN functionalities over SDN is an important requirement to enable the innovation and optimization of network resources. In this paper first we describe about SDN and NDN, and then we introduce methods for implementing NDN using SDN. We also point out the advantages and applications of implementing NDN over SDN.

An intelligent flow-based and signature-based IDS for SDNs using ensemble feature selection and a multi-layer machine learning-based classifier

2020 ◽  
pp. 1-20
Author(s):  
K. Muthamil Sudar ◽  
P. Deepalakshmi
Keyword(s):  
Machine Learning ◽  
Feature Selection ◽  
Intrusion Detection ◽  
Intrusion Detection System ◽  
Network Architecture ◽  
Detection System ◽  
Software Defined Networking ◽  
Control Plane ◽  
Control Logic ◽  
Data Plane

Software-defined networking is a new paradigm that overcomes problems associated with traditional network architecture by separating the control logic from data plane devices. It also enhances performance by providing a highly-programmable interface that adapts to dynamic changes in network policies. As software-defined networking controllers are prone to single-point failures, providing security is one of the biggest challenges in this framework. This paper intends to provide an intrusion detection mechanism in both the control plane and data plane to secure the controller and forwarding devices respectively. In the control plane, we imposed a flow-based intrusion detection system that inspects every new incoming flow towards the controller. In the data plane, we assigned a signature-based intrusion detection system to inspect traffic between Open Flow switches using port mirroring to analyse and detect malicious activity. Our flow-based system works with the help of trained, multi-layer machine learning-based classifier, while our signature-based system works with rule-based classifiers using the Snort intrusion detection system. The ensemble feature selection technique we adopted in the flow-based system helps to identify the prominent features and hasten the classification process. Our proposed work ensures a high level of security in the Software-defined networking environment by working simultaneously in both control plane and data plane.

IMPLEMENTASI DAN ANALISIS EFEKTIVITAS FIREWALL PADA SOFTWARE DEFINED NETWORK BERBASIS OPENFLOW

2018 ◽  
Vol 4 (2) ◽  
pp. 46-57
Author(s):  
Fathul Muiin ◽  
Henry Saptono
Keyword(s):  
Software Defined Network ◽  
Control Plane ◽  
Flow Table ◽  
Data Plane

Penggunaan akses internet di dunia semakin berkembang, dan selaras dengan perkembangan teknologi jaringan komputer yang semakin kompleks. Oleh karena itu, keamanan data pada sebuah komputer menjadi salah satu bagian yang sangat penting dalam sebuah jaringan. Dan SDN merupakan sebuah solusi untuk menyediakan kebutuhan jaringan komputer saat ini. Software Defined Network (SDN) merupakan pendekatan pada teknologi jaringan yang melakukan penyederhanaan terhadap kontrol dan manajemen jaringan. Pada jaringan ini nantinya akan menggunakan protokol openflow, yang prinsip utamanya memisahkan fungsi control plane dan data plane pada perangkat. Kontrol jaringan pada sebuah controller bersifat programmable, jadi dengan adanya SDN maka jaringan akan mudah diatur dan lebih fleksibel. Implementasi dan analisis firewall ini menggunakan emulator mininet untuk membuat topologi jaringan yang sederhana. Dalam pengujian firewall menggunakan bahasa XML untuk implementasi aliran data, lalu menggunakan aplikasi postman sebagai alat untuk menambahkan flow table baru pada switch, dan controller yang digunakan adalah opendaylight.

scholarly journals Software Defined Networking Flow Table Management of OpenFlow Switches Performance and Security Challenges: A Survey

2020 ◽  
Vol 12 (9) ◽  
pp. 147 ◽  
Author(s):  
Babangida Isyaku ◽  
Mohd Soperi Mohd Zahid ◽  
Maznah Bte Kamat ◽  
Kamalrulnizam Abu Bakar ◽  
Fuad A. Ghaleb
Keyword(s):  
Large Scale ◽  
Network Performance ◽  
Software Defined Networking ◽  
Cloud Services ◽  
Future Research ◽  
Control Plane ◽  
Processing Load ◽  
Flow Table ◽  
Data Plane ◽  
Large Scale Networks

Software defined networking (SDN) is an emerging network paradigm that decouples the control plane from the data plane. The data plane is composed of forwarding elements called switches and the control plane is composed of controllers. SDN is gaining popularity from industry and academics due to its advantages such as centralized, flexible, and programmable network management. The increasing number of traffics due to the proliferation of the Internet of Thing (IoT) devices may result in two problems: (1) increased processing load of the controller, and (2) insufficient space in the switches’ flow table to accommodate the flow entries. These problems may cause undesired network behavior and unstable network performance, especially in large-scale networks. Many solutions have been proposed to improve the management of the flow table, reducing controller processing load, and mitigating security threats and vulnerabilities on the controllers and switches. This paper provides comprehensive surveys of existing schemes to ensure SDN meets the quality of service (QoS) demands of various applications and cloud services. Finally, potential future research directions are identified and discussed such as management of flow table using machine learning.

Sign in / Sign up

Export Citation Format

Share Document